brangberg – Page 1346

Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite

A security flaw impacting the Wi-Fi Test Suite could enable unauthenticated local attackers to execute arbitrary code with elevated privileges.
The CERT Coordination Center (CERT/CC) said the vulnerability, tracked as CVE-2024-41992, said the susceptible code from the Wi-Fi Alliance has been found deployed on Arcadyan FMIMG51AX000J routers.
“This flaw allows an unauthenticated local attacker to

Over $1 Million Paid Out at Pwn2Own Ireland 2024

Pwn2Own Ireland 2024 participants have earned over $1 million for camera, printer, NAS device, smart speaker and smartphone exploits.

The post Over $1 Million Paid Out at Pwn2Own Ireland 2024 appeared first on SecurityWeek.

US, Australia Release New Security Guide for Software Makers

CISA, FBI, and ACSC have published guidance to help software manufacturers establish secure deployment processes.

The post US, Australia Release New Security Guide for Software Makers appeared first on SecurityWeek.

Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security

Apple has publicly made available its Private Cloud Compute (PCC) Virtual Research Environment (VRE), allowing the research community to inspect and verify the privacy and security guarantees of its offering.
PCC, which Apple unveiled earlier this June, has been marketed as the “most advanced security architecture ever deployed for cloud AI compute at scale.” With the new technology, the idea is

Joint Statement by FBI and CISA on PRC Activity Targeting Telecommunications

Landmark Admin Discloses Data Breach Impacting 800,000 People

Insurance administrator Landmark Admin says personal information stolen in a ransomware attack earlier this year.

The post Landmark Admin Discloses Data Breach Impacting 800,000 People appeared first on SecurityWeek.

Change Healthcare Ransomware Attack Impacts 100 Million People

UnitedHealth told the US health department that hackers stole the information of 100 million people in a February ransomware attack.

The post Change Healthcare Ransomware Attack Impacts 100 Million People appeared first on SecurityWeek.

Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?

Artificial Intelligence (AI) has rapidly evolved from a futuristic concept to a potent weapon in the hands of bad actors. Today, AI-based attacks are not just theoretical threats—they’re happening across industries and outpacing traditional defense mechanisms.
The solution, however, is not futuristic. It turns out a properly designed identity security platform is able to deliver defenses

AWS Seizes Domains Used by Russia’s APT29

AWS announced the seizure of domains used by Russian hacker group APT29 in phishing attacks targeting Ukraine and other countries.

The post AWS Seizes Domains Used by Russia’s APT29 appeared first on SecurityWeek.

SEC Charges 4 Companies Over Misleading SolarWinds Cyberattack Disclosures

The U.S. Securities and Exchange Commission (SEC) has charged four current and former public companies for making “materially misleading disclosures” related to the large-scale cyber attack that stemmed from the hack of SolarWinds in 2020.
The SEC said the companies – Avaya, Check Point, Mimecast, and Unisys – are being penalized for how they handled the disclosure process in the aftermath of

Author: brangberg